Maybe I don't understand the requirements file, but do the following two lines fix pycrypto and pynacl at those specific versions? Could be problematic, especially when security fixes are released for both of them. I understand that it is hard to keep testing against changing requirements, but we should think about this.